$ rpki-client -vvf rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.mft File: 1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.mft (raw, json) Hash identifier: mrL82K3IzO91tgMRBaD2vCv9j01nhAtPlE1m2m1wNhI= Subject key identifier: 60:5A:19:8F:B1:E8:5B:AC:64:4C:4E:53:D2:5D:13:3F:E5:05:93:C2 Authority key identifier: 1A:9F:A3:7F:39:AE:1F:F5:54:22:CD:1E:A4:DD:C2:2C:7B:D3:A8:22 Certificate issuer: /CN=1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822 Certificate serial: 167CF3DD14337A7C51EA3513663EA572D592E459 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.cer Subject info access: rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.mft Manifest number: 0201 Signing time: Wed 20 Aug 2025 04:10:07 +0000 Manifest this update: Wed 20 Aug 2025 04:05:07 +0000 Manifest next update: Thu 21 Aug 2025 04:29:07 +0000 Files and hashes: 1: 323830343a3936633a383830303a3a2f34302d3430203d3e20323633303835.roa (hash: m3ls13XwMMeaUU0wgwEDdQpbhiGR1d07fgmlhjZjmcs=) 2: 3230302e3233332e33362e302f32322d3332203d3e20323633303835.roa (hash: OaBqNKojikmJPtORza2BT6bwUtoaHkvHJGDrJ6TT0Jk=) 3: 3134332e3230322e3138382e302f32322d3332203d3e20323633303835.roa (hash: qVNRJ2a+cClLtMLaZjQAdZ5dHXHXN/VmcqEwBxCBPig=) 4: 323830343a3936633a363430303a3a2f34302d3430203d3e20323633303835.roa (hash: 52huXuVGIt+pjgM9LTH0dEdhFFUOrYBxuDBGKi6kYYk=) 5: 3138362e3233332e3231362e302f32322d3332203d3e20323633303835.roa (hash: PmbAUkUTs5Q/iqhBLo3baohkXrtjqFpyLdaX9yDXwCU=) 6: 323830343a3936633a383930303a3a2f34302d3430203d3e20323633303835.roa (hash: fAXn6GA+/V91XTLCQkUNO9fS3hjHpQ6K9P+U0GoI5Uw=) 7: 1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.crl (hash: Cj38egQBxb8wp4QenmtciEf+UEaQsmmNbSzv3Xul4Cs=) 8: 323830343a3936633a3a2f33322d3332203d3e20323633303835.roa (hash: yfYQFGEPfpIaz9q6MsF2wbPrq5WbyG9gA+FrZE8hhOE=) 9: 323830343a3936633a363330303a3a2f34302d3430203d3e20323633303835.roa (hash: cy03UHaQfqom7bstU3w2b656/ZgUkji+2LkvIZylFA0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.crl rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 04:29:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:7c:f3:dd:14:33:7a:7c:51:ea:35:13:66:3e:a5:72:d5:92:e4:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822 Validity Not Before: Aug 20 04:05:07 2025 GMT Not After : Aug 21 04:29:07 2025 GMT Subject: CN=605A198FB1E85BAC644C4E53D25D133FE50593C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4b:99:75:7c:50:94:c9:66:dd:a0:cd:71:c3: 8c:19:db:30:72:bd:04:16:79:60:46:09:a8:24:0f: f4:34:52:38:c8:4c:cd:24:96:53:5f:21:2e:66:90: 89:b2:a8:51:19:69:e1:3b:8f:4f:69:c2:ef:d5:c2: f1:24:12:88:b6:51:bf:d4:d2:7d:5d:a7:14:52:3b: 24:59:f0:f6:c7:e2:d4:32:e1:92:d9:9d:c8:b5:7c: 89:99:a6:07:c2:c9:ce:dc:79:8d:54:68:90:b5:73: 43:f1:23:23:ae:8a:75:c0:e1:29:cc:f8:0c:ef:c0: b4:37:a2:d4:07:fe:9b:d0:9a:79:5b:c3:96:ae:8d: ab:0d:80:a9:9b:ea:82:ae:06:aa:bf:be:f4:54:9a: 34:f2:e5:6c:e4:ed:a8:7b:ff:c5:63:f1:44:e5:2b: 49:e6:0f:91:e5:c7:5b:7b:9f:0b:77:02:ca:fd:63: ef:51:76:dc:54:20:bb:81:26:b8:f9:f5:d2:23:c9: 1b:5b:9c:b2:9e:76:84:3b:68:38:f0:bb:59:3c:bc: 5a:46:14:d9:59:4a:f1:b4:eb:dc:f0:cf:8b:c1:7c: 2a:27:0a:65:5b:ec:89:ff:c0:fd:bb:d0:60:7e:37: 67:d7:31:64:52:d2:59:06:3f:f7:77:59:7d:bc:0d: f6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:5A:19:8F:B1:E8:5B:AC:64:4C:4E:53:D2:5D:13:3F:E5:05:93:C2 X509v3 Authority Key Identifier: keyid:1A:9F:A3:7F:39:AE:1F:F5:54:22:CD:1E:A4:DD:C2:2C:7B:D3:A8:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:f7:02:af:61:0a:2d:36:5f:d7:67:8e:f9:c1:f5:0b:7c:e2: cb:92:32:6d:01:82:e6:fe:9e:84:5e:b5:dd:5c:00:82:68:a0: 58:65:a9:e9:20:2d:1c:f9:ba:e1:7d:ad:35:48:91:52:9a:e9: 56:32:2b:52:4b:6d:33:0a:f7:37:16:89:95:ac:89:49:f5:03: d2:4c:6e:8f:12:ab:19:03:8e:2b:9f:47:fb:33:ce:78:fe:d0: e1:41:89:64:7c:0a:ae:17:84:40:54:73:9f:58:61:f5:98:21: 57:08:a1:a9:f8:28:2f:ca:de:be:ff:b1:9b:f0:34:47:da:38: 88:09:b2:af:79:c2:70:0e:4b:99:dd:bf:66:2c:94:4c:f1:68: dc:e8:69:07:6e:6f:c9:e5:d9:6d:1d:0d:ea:c3:ae:26:76:b8: 10:ce:b9:c6:bb:5d:8c:4a:45:72:38:f1:92:21:4c:d2:8b:d0: 96:ba:01:e4:6b:a4:ef:bb:4f:de:47:8c:f8:79:f8:52:c4:4a: a4:06:c2:4f:9c:14:00:1d:fa:88:7e:eb:f4:5f:95:b5:fc:13: 99:bb:90:a5:ad:b1:ca:9a:9a:e7:91:64:32:74:82:7b:5d:f7: 0f:c0:4b:d9:66:dd:4c:c3:46:76:fa:31:90:32:d2:ad:29:1d: 1c:fb:40:df -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUFnzz3RQzenxR6jUTZj6lctWS5FkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5RkEzN0YzOUFFMUZGNTU0MjJDRDFFQTREREMyMkM3 QkQzQTgyMjAeFw0yNTA4MjAwNDA1MDdaFw0yNTA4MjEwNDI5MDdaMDMxMTAvBgNV BAMTKDYwNUExOThGQjFFODVCQUM2NDRDNEU1M0QyNUQxMzNGRTUwNTkzQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPS5l1fFCUyWbdoM1xw4wZ2zBy vQQWeWBGCagkD/Q0UjjITM0kllNfIS5mkImyqFEZaeE7j09pwu/VwvEkEoi2Ub/U 0n1dpxRSOyRZ8PbH4tQy4ZLZnci1fImZpgfCyc7ceY1UaJC1c0PxIyOuinXA4SnM +AzvwLQ3otQH/pvQmnlbw5aujasNgKmb6oKuBqq/vvRUmjTy5Wzk7ah7/8Vj8UTl K0nmD5Hlx1t7nwt3Asr9Y+9RdtxUILuBJrj59dIjyRtbnLKedoQ7aDjwu1k8vFpG FNlZSvG069zwz4vBfConCmVb7In/wP270GB+N2fXMWRS0lkGP/d3WX28DfZJAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUYFoZj7HoW6xkTE5T0l0TP+UFk8IwHwYDVR0j BBgwFoAUGp+jfzmuH/VUIs0epN3CLHvTqCIwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9mU3VkTTRFTXdLSEV3OXc1aXVwcHlhbmlFNFVFZVRlM3pBaVByR3N4TENZ LzAvMUE5RkEzN0YzOUFFMUZGNTU0MjJDRDFFQTREREMyMkM3QkQzQTgyMi5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8xQTlGQTM3RjM5QUUxRkY1NTQy MkNEMUVBNEREQzIyQzdCRDNBODIyLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL2ZT dWRNNEVNd0tIRXc5dzVpdXBweWFuaUU0VUVlVGUzekFpUHJHc3hMQ1kvMC8xQTlG QTM3RjM5QUUxRkY1NTQyMkNEMUVBNEREQzIyQzdCRDNBODIyLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA 1fcCr2EKLTZf12eO+cH1C3ziy5IybQGC5v6ehF613VwAgmigWGWp6SAtHPm64X2t NUiRUprpVjIrUkttMwr3NxaJlayJSfUD0kxujxKrGQOOK59H+zPOeP7Q4UGJZHwK rheEQFRzn1hh9ZghVwihqfgoL8revv+xm/A0R9o4iAmyr3nCcA5Lmd2/ZiyUTPFo 3OhpB25vyeXZbR0N6sOuJna4EM65xrtdjEpFcjjxkiFM0ovQlroB5Guk77tP3keM +Hn4UsRKpAbCT5wUAB36iH7r9F+VtfwTmbuQpa2xypqa55FkMnSCe133D8BL2Wbd TMNGdvoxkDLSrSkdHPtA3w== -----END CERTIFICATE-----Generated at Wed Aug 20 19:40:07 2025 by rpki-client